CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-57510

Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_MemoryByteStream::WritePart

Status: Published
Published: 2025-01-29
Updated: 2025-02-03
Assigning organization: mitre

Description

Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_MemoryByteStream::WritePartial.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a n/a

n/aaffected

References

https://github.com/axiomatic-systems/Bento4/issues/989 ↗
https://gist.github.com/G2FUZZ/91a1cc3b8f2b0720e984353d59023b24 ↗